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CLAIMS 

What is claimed is : 

1 . A method for securely storing encrypted programming received at a receiver in a 
subscriber network, wherein the encrypted programming includes a plurality of ciphertext 
packets, the method comprising the steps of: 

receiving from a headend of the subscriber network a first ciphertext packet at the 
receiver; 

applying to the first ciphertext packet a first cryptographic algorithm to convert 
the first ciphertext packet to a second ciphertext packet; and 

applying to the second ciphertext packet a second cryptographic algorithm to 
convert the second ciphertext packet to a third ciphertext packet. 

2. The method of claim 1, wherein the receiver is remote from the headend and 
located at a subscriber location; and further including the step of: 

storing the third ciphertext packet at the subscriber location, 

3. The method of claim 2, wherein the third ciphertext packet is stored in a device 
external to the receiver. 

4. The method of claim 2, wherein the third ciphertext packet is stored in an internal 
storage device of the receiver. 
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5. The method of claim 1, wherein the third ciphertext packet corresponds to a 
cleartext packet that has been encrypted by a 3DES algorithm. 

6. The method of claim 1, wherein the first ciphertext packet includes encrypted 
content of a program distributed by the subscriber network. 

7. The method of claim 1, further including the step of: 

applying a third cryptographic algorithm to the third ciphertext packet to convert 
the third ciphertext packet to a cleartext packet. 

8. The method of claim 1, further including the step of: 

converting the cleartext packet from a first format to a second format. 

9. The method of claim 8, wherein the first format is an MPEG format. 

10. The method of claim 9, wherein the third cryptographic algorithm is a 3DES 
algorithm. 

11. The method of claim 1 ? wherein the first cryptographic algorithm is a DES 
algorithm. 

12. The method of claim 1 ? wherein the second cryptographic algorithm is a DES 
algorithm. 
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1 13. The method of claim 1, wherein the act of converting the first ciphertext packet to 

2 the second ciphertext packet removes a layer of encryption from the first ciphertext 

3 packet. 
1 

1 14. The method of claim 1, wherein the act of converting the second ciphertext packet 

2 to the third ciphertext packet adds a layer of encryption to the second ciphertext packet, 
l 

1 15. The method of claim 1 , further including the step of: 

2 receiving a first key from the headend, wherein the first key is applied to the first 
r i 3 ciphertext packet with the first cryptographic algorithm. 

Si i 5 ? 

j ttJ l 16. The method of claim 1, further including the step of: 

HI 

^ 2 generating an encryption key at the receiver, wherein the encryption key is applied 

ifT. 3 to the second ciphertext packet with the second cryptographic algorithm. 

E 1 

a 

U l 17. The method of claim 16, further including the steps of: 

2 receiving at least one key associated with the first ciphertext packet; and 

3 applying a third cryptographic algorithm with the at least one key and the encrypt 

4 key to convert the third ciphertext packet to a cleartext packet. 
1 

1 18. The method of claim 17, wherein the third cryptographic algorithm is a 3DES 

2 algorithm. 
1 

1 19. The method of claim 1, wherein the act of converting the first ciphertext packet to 

2 the second ciphertext packet adds a layer of encryption to the first ciphertext packet, 
l 
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20. The method of claim 1, further including the step of: 

generating at least one encryption key at the receiver, wherein the at least one 
encryption key is applied to the first ciphertext packet with the first 
cryptographic algorithm and the second ciphertext packet with the second 
cryptographic algorithm. 

21. The method of claim 20, wherein the at least one encryption key is a first 
encryption key and a second encryption key, the first encryption key is applied to the first 
ciphertext packet with the first cryptographic algorithm, and the second encryption key is 
applied to the second ciphertext packet with the second cryptographic algorithm. 

22. The method of claim 20, further including the steps of: 

receiving a decrypt key associated with the first ciphertext packet; and 
applying a third cryptographic algorithm with the decrypt key and the at least one 
encrypt key to convert the third ciphertext packet to a cleartext packet. 

23. The method of claim 22, wherein the third cryptographic algorithm is a 3DES 
algorithm. 
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1 24. A method for securely providing in a subscriber network encrypted programming, 

2 which is received at a receiver at a subscriber location, the encrypted programming 

3 includes a plurality of ciphertext packets, and wherein the subscriber network includes a 

4 headend for distributing the encrypted programming and a plurality of receivers including 

5 the receiver at the subscriber location, at the headend the method comprising the steps of: 

6 applying to a cleartext packet a first cryptographic algorithm to convert the 

7 cleartext packet to a first ciphertext packet; 

8 transmitting the first ciphertext packet to the receiver; and 

9 at the receiver the method comprising the steps of: 
n 10 receiving the first ciphertext packet; 

1 1 applying to the first ciphertext packet a second cryptographic algorithm to convert 

'•'■4 $ 

!bj 12 the first ciphertext packet to a second ciphertext packet; and 

fjl 

13 applying to the second ciphertext packet a third cryptographic algorithm to 

14 convert the second ciphertext packet to a third ciphertext packet. 
1 

1 25. The method of claim 24, wherein the act of converting the first ciphertext packet 

2 to the second ciphertext packet removes a layer of encryption from the first ciphertext 

3 packet. 
1 

1 26. The method of claim 24, wherein the act of converting the second ciphertext 

2 packet to the third ciphertext packet adds a layer of encryption to the second ciphertext 

3 packet, 
l 

1 27. The method of claim 24, at the receiver, further including the step of: 

2 storing the third ciphertext packet. 
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28. The method of claim 24, at the receiver, further including the step of: 
generating at least one encryption key, wherein the at least one encryption key is 

used with the third cryptographic algorithm. 

29. The method of claim 28, wherein the at least one encryption key is a first 
encryption key and a second encryption key, the first encryption key is used with the 
second cryptographic algorithm, and the second encryption key is used with the third 
cryptographic algorithm. 

30. The method of claim 24, wherein the first cryptographic algorithm is a 3DES 
algorithm. 

31. The method of claim 24, wherein the second and third cryptographic algorithms 
are the same. 

32. The method of claim 31, wherein the second cryptographic algorithm is a DES 
algorithm. 

33. The method of claim 31, wherein the first cryptographic algorithm is the same as 
the second and third cryptographic algorithms. 

34. The method of claim 33, wherein the first cryptographic algorithm is a DES 
algorithm. 
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35. The method of claim 24, wherein the third ciphertext packet corresponds to a 
cleartext packet that has been encrypted by a 3DES cryptographic algorithm. 

36. The method of claim 24, at the receiver, further including the steps of: 
storing the third ciphertext packet; 

retrieving the third ciphertext packet from storage; and 

applying to the third ciphertext packet a fourth cryptographic algorithm to convert 
the third ciphertext packet to a cleartext packet. 

37. The method of claim 36, wherein the fourth cryptographic algorithm is a 3DES 
cryptographic algorithm. 
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1 38. A receiver in a subscriber network that receives encrypted programming, from a 

2 headend of the subscriber network, wherein the encrypted programming includes a 

3 plurality of ciphertext packets, the receiver comprising: 

4 an input port adapted to receive a first ciphertext packet of the encrypted 

5 programming; 

6 a key generator adapted to generate a plurality of encryption keys; and 

7 a cryptographic device in communication with the input port and the key 

8 generator, the cryptographic device adapted to apply a cryptographic 

9 algorithm at least twice using at least one encryption key and the first 

q 10 ciphertext packet to convert the ciphertext packet to a second ciphertext 

C3 

bk ii packet. 

|y i 

** 1 39. The receiver of claim 38, further including: 

5"J 2 a storage device in communication with the cryptographic device, the storage 

Li 

1^ 3 device adapted to store the second ciphertext packet and the at least one 

il 4 encryption key. 
1 

1 40. The receiver of claim 38, further including: 

2 an output port in communication with the cryptographic device, the output port 

3 adapted to interface with an external storage device. 
1 
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41. The receiver of claim 38, wherein the input port receives a decryption key, the 
first application of the cryptographic algorithm to the first ciphertext packet includes 
using the decryption key to convert the first ciphertext packet to a third ciphertext packet, 
and the second application of the cryptographic algorithm includes using the at least one 
encryption key and the third ciphertext packet to convert the third ciphertext packet to the 
second ciphertext packet. 

42. The receiver of claim 41, wherein the cryptographic algorithm includes a first 
function and a second function, the first application of the cryptographic algorithm 
includes using the first function, and the second application of the cryptographic 
algorithm includes using the second function. 

43. The receiver of claim 41, wherein the cryptographic algorithm is a DES algorithm. 

44. The receiver of claim 38, wherein the at least one encryption key includes a first 
key, a second key, and the first application of the cryptographic algorithm to the first 
ciphertext packet includes using the first key to convert the first ciphertext packet to a 
third ciphertext packet, and the second application of the cryptographic algorithm 
includes using the second key and the third ciphertext packet to convert the third 
ciphertext packet to the second ciphertext packet. 

45. The receiver of claim 44, wherein the cryptographic algorithm includes a first 
function and a second function, the first application of the cryptographic algorithm 
includes using the first function, and the second application of the cryptographic 
algorithm includes using the second function. 
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1 46. The receiver of claim 44, wherein the cryptographic algorithm is a DES algorithm. 
1 

1 47. The receiver of claim 38, wherein the first ciphertext packet corresponds to a 

2 cleartext packet encrypted by a DES algorithm, 
l 

1 48. The receiver of claim 38, wherein the input port is adapted to receive at least one 

2 decryption key, and the cryptographic device is adapted to use the at least one decryption 

3 key with the at least one encryption key, and a second cryptographic algorithm to convert 

4 the second ciphertext packet to a cleartext packet. 

h i 

fi 

jU l 49. The receiver of claim 48, wherein the second cryptographic algorithm is a 3DES 

yj 2 algorithm. 

l 50. The receiver of claim 38, wherein the cryptographic device includes a first 

u 2 cryptographic device and a second cryptographic device, the first cryptographic device is 

Us? 

,a 3 adapted to apply the cryptographic algorithm to the first ciphertext packet to convert the 

4 first ciphertext packet to a third ciphertext packet, and the second cryptographic device 

5 adapted to apply the cryptographic algorithm to the third ciphertext packet to convert the 

6 third ciphertext packet to the second ciphertext packet. 
1 

1 51. The receiver of claim 50, wherein the second cryptographic device is adapted to 

2 apply a second cryptographic algorithm to the third ciphertext packet to convert the third 

3 ciphertext packet to a cleartext packet, 
l 
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52. The receiver of claim 51, wherein the second cryptographic algorithm is a 3DES 
algorithm. 

53. The receiver of claim 5 1 , further including: 

a converter adapted to convert the cleartext packet from a first format to a second 
format. 

54. The receiver of claim 53, wherein the first format is an MPEG format. 

55. A method for securely storing encrypted programming received at a receiver in a 
subscriber network, wherein the encrypted programming includes a plurality of ciphertext 
packets, the method comprising the steps of: 

receiving a first ciphertext packet having multiple layers of encryption thereon at 
the receiver; and 

applying an cryptographic algorithm to the first ciphertext packet to convert the 
first ciphertext packet to a second ciphertext packet. 

56. The method of claim 55, wherein the second ciphertext packet corresponds to a 
cleartext packet that was encrypted using a second cryptographic algorithm. 

57. The method of claim 56, wherein the second cryptographic algorithm is a 3DES 
cryptographic algorithm. 

58. The method of claim 55, wherein the multiple layers of an encryption include a 
first layer and a second layer. 

54 
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59. The method of claim 58, wherein the first layer of encryption corresponds to 
applying a second cryptographic algorithm to convert a cleartext packet to a third 
ciphertext packet. 

60. The method of claim 59, wherein the second cryptographic algorithm is a DES 
algorithm. 

61. The method of claim 59, wherein the second layer of encryption corresponds to 
applying a third cryptographic algorithm to convert the third ciphertext packet to the first 
ciphertext packet. 

62. The method of claim 61, wherein the third cryptographic algorithm is a DES 
algorithm. 

63. The method of claim 55, further including the steps of: 

applying a second cryptographic algorithm to the second ciphertext packet to 
convert the second ciphertext packet to a cleartext packet. 

64. The method of claim 63, wherein the second cryptographic algorithm is a 3DES 
algorithm. 

65. The method of claim 63, further including the step of: 
converting the cleartext packet from a first format to a second format. 

66. The method of claim 65, wherein the first format is an MPEG format. 
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67. The method of claim 55, further including the step of: 

receiving multiple keys, each key associated with at least one layer of encryption 
of the first ciphertext packet. 

68. The method of claim 55, further including the step of: 
generating a key for use with the cryptographic algorithm. 
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1 69. A method for providing a subscriber of a subscriber network with a program, the 

2 subscriber network including a headend with a plurality of receivers coupled thereto, at 

3 the headend the method comprising the steps of: 

4 receiving a first ciphertext packet; 

5 applying an cryptographic algorithm with a key to the first ciphertext packet to 

6 convert the first ciphertext packet to a second ciphertext packet; 

7 transmitting the second ciphertext packet; and 

8 at the receiver the method comprising the steps of: 

9 receiving the second ciphertext packet having multiple layers of encryption 

O 10 thereon; and 

O 

H 11 applying a second cryptographic algorithm to the second ciphertext packet to 

:xs 

W 12 convert the second ciphertext packet to a third ciphertext packet. 

IF* ! 

JJ"J 1 70. The method of claim 69, wherein the first ciphertext packet corresponds to a 

2 cleartext packet that was encrypted by a third cryptographic algorithm using a second 

M 3 key. 
l 

1 71. The method of claim 70, wherein the first, the second and the third cryptographic 

2 algorithms are the same. 
1 

1 72. The method of claim 71, wherein the first cryptographic algorithm is a DES 

2 algorithm. 
1 
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73. The method of claim 69, wherein the third ciphertext packet corresponds to a 
cleartext packet that was encrypted using a forth cryptographic algorithm. 

74. The method of claim 73 , wherein the fourth cryptographic algorithm is a 3DES 
cryptographic algorithm. 

75. The method of claim 69, at the receiver, further including the step of: 

applying a third cryptographic algorithm to the third ciphertext packet to convert 
the third ciphertext packet to a cleartext packet. 

76. The method of claim 75, wherein the third cryptographic algorithm is a 3DES 
algorithm. 

77. The method for securely providing a subscriber of a subscriber network with an 
encrypted program, wherein the encrypted program includes a plurality of ciphertext 
packets, the method comprising the steps of: 

receiving a first ciphertext packet of the encrypted program; 

applying an cryptographic algorithm with a key to the first ciphertext packet to 

convert the first ciphertext packet to a second ciphertext packet; and 
transmitting the second ciphertext packet. 

78. The method of claim 77, wherein the first ciphertext packet corresponds to a 
cleartext packet that was encrypted by a second cryptographic algorithm using a second 
key. 
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79. The method of claim 78, wherein the first and second cryptographic algorithms 
are the same. 

80. The method of claim 79, wherein the first cryptographic algorithm is a DES 
algorithm. 

81 . The method of claim 77, further including the step of: 

receiving a second key, wherein the second key is used with a second 
cryptographic algorithm to convert the first ciphertext packet to cleartext. 

82. The method of claim 81, further including the step of: 
transmitting the first and second key. 

83 A receiver in a subscriber network that receives encrypted programming from a 
headend of the subscriber network, wherein the encrypted programming includes a 
plurality of ciphertext packets, the receiver comprising: 

a port adapted to receive a first ciphertext packet of the encrypted programming, 
the first ciphertext packet corresponding to a cleartext packet having 
multiple layers of encryption thereon; 
a key generator adapted to generate an encryption key; and 

a cryptographic device in communication with the input port and the key 
generator, the cryptographic device adapted to apply a cryptographic 
algorithm using the encryption key to the first ciphertext packet to convert 
the ciphertext packet to a second ciphertext packet. 
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1 84. The receiver of claim 83, further including: 

2 a storage device in communication with the cryptographic device, the storage 

3 device adapted to store the second ciphertext packet and the encryption 

4 key. 
1 

1 85. The receiver of claim 83 , further including: 

2 an output port in communication with the cryptographic device, the output port 

3 adapted to interface with external storage devices. 
1 

CJ 1 86. The receiver of claim 83, wherein the cryptographic algorithm is a DES algorithm. 

||1 
•& . « 

1 87. The receiver of claim 83, wherein the second ciphertext packet corresponds to a 

2 cleartext packet encrypted by a 3DES algorithm. 

hi l 

m l 88. The receiver of claim 83, wherein the input port is adapted to receive at least one 

O 

2 decryption key, and the cryptographic device is adapted to use the at least one decryption 

3 key with the encryption key and a second cryptographic algorithm to convert the second 

4 ciphertext packet to the corresponding cleartext packet. 
1 

1 89. The receiver of claim 88, wherein the second cryptographic algorithm is a 3DES 

2 algorithm. 
1 

1 90. The receiver of claim 88, further including: 

2 a converter adapted to convert the cleartext packet from a first format to a second 

3 format, 
l 
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1 91 . The receiver of claim 90, wherein the first format is an MPEG format. 
1 

1 92. A method for securely storing encrypted programming received at a receiver in a 

2 subscriber television network, wherein the encrypted programming includes a plurality of 

3 ciphertext packets, the method comprising the steps of: 

4 receiving from a headend of the subscriber network a first ciphertext packet at the 

5 receiver, wherein the first ciphertext packet has a single layer of 

6 encryption thereon that was applied by a first cryptographic algorithm 

7 using a first key; 

8 generating a second and third key; 

H 9 applying to the first ciphertext packet a second cryptographic algorithm with the 

lil 

W io second key to convert the first ciphertext packet to a second ciphertext 

¥ * 1 1 packet having a second layer of encryption thereon; and 

E"J 12 applying to the second ciphertext packet a third cryptographic algorithm with the 

«U 13 third key to convert the second ciphertext packet to a third ciphertext 

hh 1 4 packet having a third layer of encryption thereon, 
l 

1 93. The method of claim 92, wherein the receiver is remote from the headend and 

2 located at a subscriber location; and further including the step of: 

3 storing the third ciphertext packet and the second and third keys at the subscriber 

4 location, 
l 

1 94. The method of claim 92, further including the steps of: 

2 receiving the first key from the headend; and 
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3 storing the third ciphertext packet and the first, second and third keys at the 

4 subscriber location. 
1 

1 95. The method of claim 94, further including the steps of: 

2 retrieving the third ciphertext packet and the first, second and third keys from 

3 storage; and 

4 decrypting the third ciphertext packet by applying a fourth cryptographic 

5 algorithm to third ciphertext packet with the first, second and third keys, 
l 

1 96. The method of claim 95, wherein the first, second and third cryptographic 

2 algorithms are DES and the fourth cryptographic algorithm is a 3DES algorithm, third 

3 ciphertext packet corresponds to a cleartext packet that has been encrypted by a 3DES 

4 algorithm. 

1 97. The method of claim 92, wherein the first ciphertext packet includes encrypted 

2 content of a program distributed by the subscriber cable television network. 



98. The method of claim 92, wherein the second and third cryptographic algorithms 
are DES algorithms. 

99. The method of claim 92, wherein the third ciphertext packet corresponds to a 
cleartext packet that has been encrypted by a 3 DES algorithm. 



2 



100. A receiver in a subscriber cable television network that receives encrypted 
programming, from a headend of the subscriber cable television network, wherein the 
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3 encrypted programming includes a plurality of ciphertext packets, the receiver 

4 comprising: 

5 an input port adapted to receive a first ciphertext of the encrypted programming, 

6 wherein the first ciphertext packet has a single layer of encryption thereon 

7 that was applied by a first cryptographic algorithm using a first key; 

8 a key generator adapted to generate a plurality of keys including a second key and 

9 a third key; 

10 a cryptographic device in communication with the input port and the key 

11 generator, the cryptographic device adapted to convert the first ciphertext 

12 packet to a second ciphertext packet using a second cryptographic 
algorithm and the second key and thereafter to convert the second 
ciphertext packet to a third ciphertext packet using a third cryptographic 

^ 15 algorithm and the third key; and 

L 16 a storage device in communication with the cryptographic device adapted to store 

'lS 17 the third ciphertext packet and the second and third keys. 



O 13 



1 



1.J 

1 



101. The receiver of claim 1 00, wherein the input port receives the first key, and the 

2 cryptographic device is further adapted to decrypt the third ciphertext packet by applying 

3 a fourth cryptographic algorithm to the third ciphertext packet with the first, second and 

4 third keys thereby converting the third ciphertext packet to a cleartext packet. 
1 

1 1 02. The receiver of claim 101, wherein the first, second and third cryptographic 

2 algorithms are a DES algorithm and the fourth cryptographic algorithm is a 3DES 

3 algorithm. 
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1 03 . The receiver of claim 101, further including: 

a converter in communication with the cryptographic device adapted to convert 
the cleartext packet from a first format to a second format. 



104. The receiver of claim 1 03, wherein the first format is an MPEG format. 



105. A method for securely storing encrypted programming received at a receiver in a 
subscriber television network, wherein the encrypted programming includes a plurality of 
ciphertext packets, the method comprising the steps of: 

receiving from a headend of the subscriber network a first ciphertext packet at the 
receiver and a first key, a second key and a third key, wherein the first 
ciphertext packet has three layers of encryption thereon that were applied 
by a first cryptographic algorithm using the first key, the second key and 
the third key; 

generating a fourth key; 

applying to the first ciphertext packet a second cryptographic algorithm with the 

first key to convert the first ciphertext packet to a second ciphertext packet 

having two layers of encryption thereon; and 
applying to the second ciphertext packet a third cryptographic algorithm with the 

fourth key to convert the second ciphertext packet to a third ciphertext 

packet having a third layer of encryption thereon. 

106. The method of claim 105, wherein the receiver is remote from the headend and 
located at a subscriber location; and further including the step of: 
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storing the third ciphertext packet and the second, third and fourth keys at the 
subscriber location. 



107. The method of claim 106, further including the steps of: 

retrieving the third ciphertext packet and the second, third and fourth keys from 
storage; and 

decrypting the third ciphertext packet by applying a fourth cryptographic 
algorithm to third ciphertext packet with the second, third and fourth keys, 
thereby converting the third ciphertext packet to a cleartext packet. 

108. The method of claim 107, further including the step of: 
converting the cleartext packet from a first format to a second format. 

1 09. The method of claim 108, wherein the first format is an MPEG format. 
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110. A receiver in a subscriber cable television network that receives encrypted 
programming, from a headend of the subscriber cable television network, wherein the 
encrypted programming includes a plurality of ciphertext packets, the receiver 
comprising: 

an input port adapted to receive a first key, a second key, a third key and a first 
ciphertext of the encrypted programming, wherein the first ciphertext 
packet has three layers of encryption thereon that were applied by a first 
cryptographic algorithm using the first key, a second key and a third key; 

a key generator adapted to generate a fourth key; 

a cryptographic device in communication with the input port and the key 
generator, the cryptographic device adapted to convert the first ciphertext 
packet to a second ciphertext packet using a second cryptographic 
algorithm and the first key and thereafter to convert the second ciphertext 
packet to a third ciphertext packet using a third cryptographic algorithm 
and the fourth key; and 

a storage device in communication with the cryptographic device adapted to store 
the third ciphertext packet and the second, third and fourth keys. 

111. The receiver of claim 1 1 0, wherein the cryptographic device is further adapted to 
decrypt the third ciphertext packet by applying a fourth cryptographic algorithm to the 
third ciphertext packet with the second, third and fourth keys thereby converting the third 
ciphertext packet to a cleartext packet. 
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112. The receiver of claim 111, wherein the first, second and third cryptographic 
algorithms are a DES algorithm and the fourth cryptographic algorithm is a 3DES 
algorithm. 

113. The receiver of claim 111, further including: 

a converter in communication with the cryptographic device adapted to convert 
the cleartext packet from a first format to a second format. 

1 14. The receiver of claim 113, wherein the first format is an MPEG format. 

115. A method for securely storing encrypted programming received at a receiver in a 
subscriber television network, wherein the encrypted programming includes a plurality of 
ciphertext packets, the method comprising the steps of: 

receiving from a headend of the subscriber network a first ciphertext packet at the 
receiver and a first key and a second key, wherein the first ciphertext 
packet has two layers of encryption thereon that were applied by a first 
cryptographic algorithm using the first key and a second cryptographic 
algorithm using the second key; 

generating a third key; and 

applying to the first ciphertext packet a third cryptographic algorithm with the 
third key to convert the first ciphertext packet to a second ciphertext 
packet having three layers of encryption thereon. 
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116. The method of claim 115, wherein the receiver is remote from the headend and 
located at a subscriber location; and further including the step of: 

storing the third ciphertext packet and the first, second and third keys at the 
subscriber location. 

1 1 7. The method of claim 1 1 6, further including the steps of: 

retrieving the third ciphertext packet and the first, second and third keys from 
storage; and 

decrypting the third ciphertext packet by applying a fourth cryptographic 
algorithm to third ciphertext packet with the first, second and third keys, 
thereby converting the third ciphertext packet to a cleartext packet. 

118. The method of claim 1 17, further including the step of: 
converting the cleartext packet from a first format to a second format. 

1 19. The method of claim 1 1 8, wherein the first format is an MPEG format. 
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120. A receiver in a subscriber cable television network that receives encrypted 
programming, from a headend of the subscriber cable television network, wherein the 
encrypted programming includes a plurality of ciphertext packets, the receiver 
comprising: 

an input port adapted to receive a first key and a second key and a first ciphertext 
of the encrypted programming, wherein the first ciphertext packet has two 
layers of encryption thereon that were applied by a first cryptographic 
algorithm using the first key and a second cryptographic algorithm using 
the second key; 

a key generator adapted to generate a third key; 

a cryptographic device in communication with the input port and the key 
generator, the cryptographic device adapted to convert the first ciphertext 
packet to a second ciphertext packet using a third cryptographic algorithm 
and the third key; and 

a storage device in communication with the cryptographic device adapted to store 
the third ciphertext packet and the first, second and third keys. 

121. The receiver of claim 120, wherein the cryptographic device is further adapted to 
decrypt the third ciphertext packet by applying a fourth cryptographic algorithm to the 
third ciphertext packet with the first, second and third keys thereby converting the third 
ciphertext packet to a cleartext packet. 

122. The receiver of claim 121 , wherein the first, second and third cryptographic 
algorithms are a DES algorithm and the fourth cryptographic algorithm is a 3DES 
algorithm.* 
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123. The receiver of claim 121, further including: 

a converter in communication with the cryptographic device adapted to convert 
the cleartext packet from a first format to a second format. 

124. The receiver of claim 123, wherein the first format is an MPEG format. 
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